Groups, rings and fields
The algebraic-structure hierarchy from group to field, each with its axioms, the lecture's Z and Q examples, the full F7 field proof, and Z8 as a commutative ring that is not a field.
- State the four group axioms and the fifth axiom that makes a group abelian, and check them against Z under addition.
- State the axioms of a ring, a commutative ring and a field, and place integral domains in the hierarchy.
- Explain why Z is not a field and Q is, using the multiplicative-inverse axiom.
- Verify all eight field axioms for F7 with the lecture's own numeric checks.
- Show that Z8 is a commutative ring but not a field, using the failure of 2 to have a multiplicative inverse.
20 min read
Intuition
Every cryptographic scheme this unit covers computes inside one of a small number of algebraic shapes, and
which shape it is decides what operations are even available. RSA works inside , which turns out
to be only a ring: you can add, subtract and multiply, but not always divide, and RSA’s security leans on
that gap directly. AES works inside , a field, where every nonzero element has a
multiplicative inverse, and the AES S-box is built from exactly that inverse (04-07 covers the construction).
Diffie-Hellman and the discrete logarithm problem live inside a cyclic group under multiplication. None of
this is incidental vocabulary: whether a structure guarantees an inverse for every element is the difference
between a scheme that works and one that silently breaks on certain inputs. This page builds the hierarchy,
group, abelian group, ring, commutative ring, field, from the ground up, so those guarantees can be checked
rather than assumed.
Mechanism
A group is a set with a binary operation, written here, satisfying four properties:
- Closure. For all , .
- Associativity. For all , .
- Identity element. There exists such that for every .
- Inverse elements. For every , there exists with .
The operation does not have to be literal addition. It can be multiplication, or any binary operation meeting these four requirements. When the operation is also commutative ( for all ), the group is an abelian group, also called a commutative group.
Worked example
AnswerZ is an abelian group under addition
- Closure. and .
- Associativity. and . Equal.
- Identity. is the additive identity: and .
- Inverse. For , the inverse is , since .
- Commutativity. and . Equal.
- All five properties hold, so is an abelian group.
Mechanism
A ring adds a second operation, multiplication, on top of the additive group structure:
- Closure. and are both in the set, for all .
- Associativity. and .
- Additive identity. for all .
- Additive inverse. For every , there is with .
- Commutativity of addition. .
- Distributive laws. and .
Two things a ring does not require: multiplication does not have to be commutative ( can fail), and there does not have to be a multiplicative identity. satisfies all six properties, so is a ring.
Mechanism
A commutative ring is a ring with one more property:
- Commutativity of multiplication. for all .
satisfies this too, so is a commutative ring. A ring with a multiplicative identity (an element with ) is called a ring with unity. An integral domain is a commutative ring with unity that additionally has no zero divisors: forces or . is an integral domain. The supplement introduces the term as part of the algebraic-structure hierarchy but does not work through a separate proof for it, so no additional worked example is given here beyond noting where it sits: strictly between commutative ring and field.
Mechanism
A field adds the strongest requirement of all: a multiplicative inverse for every nonzero element.
- Multiplicative inverse. For every , there exists with .
A field is a commutative ring with unity where that eighth property also holds, supporting addition, subtraction, multiplication, and division by anything except zero.
Compare
Satisfies every field axiom except the last. Take : its multiplicative inverse would have to be , since , but . No integer inverse exists for , so is not a field, only a commutative ring.
The same check succeeds: ‘s inverse is , and . Every nonzero rational has a rational inverse (flip the fraction), so satisfies all eight field axioms and is a field.
Exam detail
One counter-example is enough to disqualify a structure from being a field: the multiplicative-inverse axiom is universal (“for every nonzero element”), so a single element without an inverse breaks it. This is exactly the shape of both counter-examples on this page: one missing inverse for rules out , and one missing inverse for rules out below.
Mechanism
A prime field, written or , is the set with addition and multiplication taken modulo a prime . The lecture works through , checking every field axiom directly against numeric examples.
Worked example
AnswerF7 satisfies all eight field axioms
- Closure. : , and .
- Associativity (addition). : ; . : ; . Both equal .
- Associativity (multiplication). : ; . : ; . Both equal .
- Additive identity. : .
- Additive inverse. , so is the additive inverse of . Likewise , so is the additive inverse of .
- Commutativity of addition. and . Equal.
- Distributive laws. : ; . : , , . Both equal .
- Commutativity of multiplication. and . Equal.
- Multiplicative inverse. , so is the multiplicative inverse of . And , so is its own inverse.
- All eight axioms hold for every element checked, so is a field.
Aside
Finding an inverse by testing every element of in turn, as the last step does for and , works fine at this size. For a larger prime it does not: that is exactly the job the extended Euclidean algorithm on extended Euclid and modular inverses does instead, computing a modular inverse directly rather than by search.
Mechanism
A prime field is only a field because is prime. The general set under addition and multiplication modulo is always a commutative ring, but it is only a field when is prime. makes the gap concrete: is not prime, and turns out to have no multiplicative inverse mod .
Worked example
AnswerZ8 is a commutative ring, not a field, because 2 has no multiplicative inverse mod 8
Checking every possible inverse for by scanning :
- Every product is even, and is odd, so none of these ever equals . has no multiplicative inverse in , so is not a field. It is a commutative ring only.
Pitfall
Row above, , is printed in the Week 4 abstract-algebra supplement as
. That line is wrong: , and , not . 04-02 flags the
same slip where this table first appears on this site. The conclusion is unaffected either way, since is
not any more than is, but if this table is ever reproduced from the source directly, the printed
in that one row is the error, not a valid alternative reading.
Exam detail
The reason fails and, say, would not: a multiplicative inverse for mod exists exactly when
, the same condition 04-03 establishes for modular inverses in general. , so is disqualified before any scanning is needed. This is also why is a field precisely
when is prime: for a prime modulus, every nonzero element is automatically coprime to it, so every nonzero
element has an inverse. Fixing this for , where the underlying set is not the integers mod
at all but polynomials, is exactly what 04-07 builds next.
Recall
A set satisfies every ring axiom, is commutative under multiplication, and has a multiplicative identity. Is it necessarily a field?
No. That description is a commutative ring with unity, possibly an integral domain if it also has no zero divisors, but a field requires one more property: every nonzero element must have a multiplicative inverse. satisfies everything up to and including commutativity of multiplication and has a multiplicative identity (), yet is not a field, because has no inverse mod .